registry  /  @ktpartners/dgs-platform  /  3.7.0

@ktpartners/dgs-platform@3.7.0

Deliver Great Systems Platform — A meta-prompting, context engineering and spec-driven development system for Claude Code and Gemini by KT Partners.

Static Scan Results

scanned 12d ago · by rust-scanner

Static analysis flagged 11 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
Supply chain
HighEntropyStringsUrlStrings
Manifest
NoLicense
scanned 121 file(s), 3.34 MB of source, external domains: api.search.brave.com, app.snyk.io, bitbucket.org, cli.github.com, discord.gg, docs.snyk.io, example.com, git-scm.com, github.com, nvd.nist.gov, rubygems.org

Source & flagged code

2 flagged · loading source
bin/install.jsView file
2L3: const fs = require('fs'); L4: const path = require('path');
Medium
Dynamic Require

Package source references dynamic require/import behavior.

bin/install.jsView on unpkg · L2
deliver-great-systems/bin/lib/docs.cjsView file
228package = @ktpartners/dgs-platform; repositoryIdentity = deliver-great-systems; dependency = exceljs L228: const script = ` L229: const ExcelJS = require('exceljs'); L230: const workbook = new ExcelJS.Workbook();
High
Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

deliver-great-systems/bin/lib/docs.cjsView on unpkg · L228

Findings

1 High4 Medium6 Low
HighCopied Package Dependency Bridgedeliver-great-systems/bin/lib/docs.cjs
MediumDynamic Requirebin/install.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License